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Abstract — Enterprise used VSAT(Very Small Aperture 
Terminal), a satellite communication system for data transfer. 
It had many drawbacks like small data transfer window, no 
guarantee over analog transmission, low bandwidth, no 
security, less cost effective, etc. Then private networks, based 
on Frame Relay and point-to-point circuits where used which 
provided network security since public did not have access. 
Later Frame Relay with Permanent Virtual Circuits (PVCs) 
were used as Virtual Private Network (VPN), where private 
data was transferred over public networks, since enterprises 
needed dedicated PVCs cost was more. So, emerging category 
now is Service Provider VPNs, where a service provider 
provides the backbone network to an enterprise. Service 
Providers can use MPLS/BGP approach, where MPLS 
(Multiprotocol Label Switching) forwards the data supporting 
multiple protocols and BGP (Border Gateway Protocol) 
controls route to construct secure network [1], [2]. The paper 
depicts simulation of MPLS/BGP network for enterprises, 
using GNS3 simulator. Two enterprises working on Open 
Shortest Path First (OSPF) and Enhanced Interior Gateway 
Routing Protocol (EIGRP) having sites at different location are 
depicted. Virtual routing and forwarding instant, working on 
label switching and node failure (redundancy) for this network 
is discussed. How the provider network restricts access to 
different enterprises is shown. The performance of MPLS 
exceeds conventional IP routing is depicted using test cases. 
The results show that on node failure alternate path change 
takes very few seconds. 


Index Terms — MPLS, Enterprise Network, BGP-MPLS, 
MPLS Performance. 

I. Introduction 

To integrate the work in an enterprise, employees share 
files on the networking system. Today, enterprises use 
applications like customer relationship management (CRM), 
enterprise resource planning (ERP), etc., commonly. So 
servers hosting these applications have to now process and 
deliver data at Gigabit speeds. These performance demands 
and increase in bandwidth must be supported by the 
enterprise’s network infrastructure. Thus, a secure a reliable 
network connection is required to protect the data transferred 
[3]. Multiprotocol Label Switching (MPLS) offers extremely 
scalable, deterministic re-route, traffic engineering, 
data-carrying mechanism which transfers data packets with 
assigned labels across the network through virtual links [5]. 
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Border Gateway Protocol (BGP), which acts as a core routing 
protocol of the Internet. It maintains a table of IP networks or 
prefixes and assigns network reachability to autonomous 
systems; as a result it is indirectly used by the Internet users. 
iBGP protocol is used among the routers in autonomous 
system to command the internal routers. 

n. Literature Review 

Multiprotocol Label Switching is a popular networking 
technology that uses labels attached to packets to forward 
them through the network. Before MPLS, the most popular 
WAN protocols were ATM and Lrame Relay, then, with 
popularity of the Internet, IP became the most popular. The 
MPLS labels are advertised between routers so they can build 
a label-to-label mapping. These labels are attached to the IP 
packets, enabling the routers to forward the traffic by looking 
at the label and not the destination IP address. Thus, the 
packets are forwarded by label switching instead of IP 
switching. This has lead to popularity of MPLS. BGP/MPLS 
VPN supports the provision of IP connectivity by a service 
provider to multiple customers over a common physical IP 
backbone, while allowing complete logical separation of 
customer traffic and routing information. Interconnection of 
different sites belonging to the same customer is provided 
over the MPLS backbone. Lig. 1 shows an example of a VPN 
with a service provider (P) backbone network, service 
provider edge routers (PE), and customer edge routers (CE). 
The key network components of the BGP/MPLS VPN are the 
provider edge (PE) routers, the provider (P) routers and the 
customer edge (CE) routers. The PE routers are routers 
within the service provider backbone that connect to 
customer sites. In a MPLS network, a PE router also 
performs as an edge LSR. The P routers are routers within the 
service provider backbone that do not connect directly to 
customer sites. They are the LSRs in a MPLS network. The 
CE routers are routers at the customer sites that are directly 
connected to the service provider network. They connect 
directly to the PE routers. 

III. Network Simulation 

Network Structure for Simulation is depicted in Lig. 1 . There 
are two Provider routers PI and P2, four Provider Edge 
routers PEI, PE2, PE3 and PE4 and two Customer Edge 
routers CE1 A and CE1B. Customer IBM-A site is connected 
to CE1 A with and customer IBM-B site is connected to CE1B 
with. OSPL 1 area 0 is given to all P and PE routers while 
OSPF 10 area 1 is given to CE1A and CE1B routers. Since 
MPLS supports different protocols, simulation is extended to 
Customer APL. Customer Edge routers CE2A and CE2B are 
extended to PE2 and PE3 respectively, and run EIGRP 
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process 10. Customer APL-A site is connected to CE2B and 
customer APL-B site is connected to CE2A. 


CE1A CE2B 



Fig. 1 Network Structure. 

A. Virtual Routing and Forwarding Instant 
How an IP packet traverses the MPLS VPN backbone from 
one customer site to another? MP-BGP running between the 
PE routers distributes the vpnv4 routes and their associated 
VPN label. Between all PE and CE routers, the routing 
protocol puts the customer routes into the VRF routing table 
on the PE routers. Fig. 2 shows path taken by the packet from 
CE1 A, where IBM site A is located, to CE1B, where IBM site 
B is located. The packet routes through CE1A( 1.1. 10.1) - 
PEl(l.l.lO.l) - PH172.16.9.5) - PE4(10.10.10.1) - CE1B 
( 10 . 10 . 10 . 1 ). 



APL-B 1M-B 


Fig. 2 Path from IBM-A site to IBM-B site. 

B. Working of Label Switching 
Fig. 3 shows that packet destined for 10.1.7.1 entering the 
MPLS network on ingress LSR (PEI), where it is imposed 
with the label 21 and switched towards the next LSR. Second 
LSR (PI) swaps incoming label 21 to outgoing label 27 and 
forwards to next LSR (PE4). The egress LSR receiving a 


packet with label 27 would remove the label and perform an 
IP lookup on the destination IP address. 


APL-BItraceroute 112,25,10.1 

Type escape sequence to abort, 

Tracing the route to 172.25.10,1 

1 172.32,10,1 220 nsec 123 nsec 275 nsec 

2 172,15,9,23 [MPLS: Labels 19/28 Exp 0] 195 msec 592 nsec 652 nsec 

3 10.10,10,5 JHPLS: Label 28 Exp 0]| 572 nsec 128 msec 576 nsec 
9 10.10,10,6 500 nsec 576 nsec 328 nsec 


Fig. 3 Label Switching on routing path 

C. Node Failover (Redundancy) 

The MPLS network designed is such that redundancy exists. 
There are multiple paths to reach destination address. When 
a link fails, automatically other path is taken to reach the 
destination address. Fig. 4a and fig. 4b shows alternate path 
taken to reach IBM-B site. When PI fails P2 (172.16.9.33) is 
chosen to complete the route. Figure 3.6.2 shows that packet 
destined for 10.1.7.1 entering the MPLS network on ingress 
LSR (PEI), where it is imposed with the label 24 and 
switched towards the next LSR. Second LSR (PI) swaps 
incoming label 24 to outgoing label 27 and forwards to next 
LSR (PE4). The egress LSR receiving a packet with label 27 
would remove the label and perform an IP lookup on the 
destination IP address. 


aw aa 



Fig. 4a Alternate route to IBM-B site. 
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Fig. 4b Alternate route to IBM-B site. 


IV. Test Cases and Results 

A. Restricts others in Enterprise VPN 
One of the MPLS traffic engineering is to restrict admission 
to other Enterprise VPN’s. Thus if APL site tries to contact 
IBM site, MPLS will restrict its admission. Fig. 5 shows that 
APL-A site tries to contact IBM-A site or IBM-B, it fails to 
so. Similarly, IBM site is restricted to access APL VPN’s. 
Fig. 6 shows that IBM-A site is not allowed to contact APL 
sites. 



Fig. 5 Restriction to APL site on contacting IBM site. 


§ CE1A ° ® % 


Connected to Dynamips VM "CE1A" (ID 1, type c2691) - Console port 
Press ENTER to get the prompt. 

IBM-Atping 172.25.10.1 

Type escape sequence to abort. 

Sending 5, 100-byte ICMP Echos to 172.25.10.1, timeout is 2 seconds: 


Success rate is 0 percent (0/5) 

IBM-Alping 192.168.40.1 

Type escape sequence to abort. 

Sending 5, 100-byte ICMP Echos to 192.168.40.1, timeout is 2 seconds: 


Success rate i3 0 percent (0/5) 
IBM-A*[] 


Fig. 6 Restriction to APL site on contacting IBM site. 


B. Performance test 

In IP routing, conventionally, each router has to 
independently decide route for each incoming packets. The 
router consults the routing table, which is build using IP 
routing protocols like BGP, OSPF, IS-IS, etc., to find the next 
hop for that packet based on destination address. Each router 
in the network performs all of these steps. The main issue 
with conventional routing protocols is that they do not take 
capacity constraints and traffic characteristics into account 
when routing decisions are made. There are many limitations 
in conventional IP routing. 


• Limited capability to deal with addressing 

information. 

• All traffic to same IP address is treated similar. 

• It becomes difficult to perform traffic engineering. 

• For highly interactive application, flow of packets 

should have low delay and less packet loss 
threshold. 

Routing in conventional IP networks take excess time due to 
look up tables. Also re - route on node failure is difficult in 
conventional IP routing. MPLS allows fast re - route 
capability due to label switching. To check the performance 
of MPLS network on node failure was performed with 
following test cases. Time taken to re-route is calculated 
using time out for packet to reach destination with number of 
dropped packets before new route is selected. Six test cases 
were used to find average time taken to re-route on node 
failure in the network. Test case 1 and test case 2 were taken 
for packet flow from IBM-A site to IBM-B site, where 
packets take route from provider P 1 . When P 1 fails, packets 
drop until MPLS re-routes packet from P2. The scenarios are 
shown in fig. 7 and fig. 8. In test case 1, 13 packets are 
dropped before re-route and in test case 2, 12 packets are 
dropped before re-route. 



Fig. 7 Test case 1 (re-route from IBM-A site to IBM-B site). 


CE1A 


CE2B 



Fig. 8 Test case 2 (re-route from IBM-A site to IBM-B site). 
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Fig. 9 Test case 3 (re-route from APL-B site to APL-A site). 


Test case 3 and test case 4 were taken for packet flow from 
APL-B site to APL-A site, where packets take route from 
provider P2. When P2 fails, packets drop until MPLS 
re-routes packet from Pl. The scenarios are shown in fig. 9 
and fig. 10. In test case 3, 9 packets are dropped before 
re-route and in test case 4, 11 packets are dropped before 
re-route. 



Fig. 10 Test case 4 (re-route from APL-B site to APL-A site. 


Test case 5 was taken for packet flow from IBM-B site to 
IBM-A site, where packets take route from provider P2. 
When P2 fails, packets drop until MPLS re-routes packet 
from Pl. The scenario is shown in fig. 11. In test case 5, 10 
packets are dropped before re-route. 


CE1A CE2B 



Fig. 1 1 Test case 5 (re-route from IBM-B site to IBM-A site). 



Fig. 12 Test case 6 (re-route from APL-A site to APL-B site). 


Test case 6 was taken for packet flow from APL-A site to 
APL-B site, where packets take route from provider P2. 
When P2 fails, packets drop until MPLS re-routes packet 
from Pl. The scenario is shown in fig. 12. In test case 6, 10 
packets are dropped before re-route. 

Based on test cases following data is computed. 

• Re-route time = No. of dropped packets X time out. 

Table 1 gives average re-route time on node failure. Figure 
14 shows bar graph for test cases depicting re-route time. 
Thus, from above given data we conclude that average 
re-route time on node failure in 21.67 seconds, which is very 
less than time taken to re-route in IP routing using fast 
re-route techniques. 

V. Conclusion 

In traditional IP routing, there are many limitations. Like 
limited capability to deal with addressing information. Re - 
route mechanism not available instantly. All traffic to same 
IP address is treated similar. Routing packets in a network 
with two same IP addresses of different customers cannot be 
handled. Highly interactive applications in enterprise cannot 
run smoothly with such routing of packets. In conventional 
IP routing using fast re-routing techniques, time taken to 
re-route requires recalculating routes, which may go up to 
thousands of seconds. 

In BGP-MPLS VPN, time taken to re-route on single node 
failure is just few seconds. Handling route for same IP 
address for different customer is not an issue since routing is 
done using labels and not IP addresses. Customers are not 
aware of MPLS and how packet route to destination. 
Different customers are restricted access of each other’s data, 
thus privacy is maintained. Since MPLS is supporting 
multiple protocols, OSPF and EIGRP VPN’s could 
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successfully utilize same network to route packet, thus 
reducing cost to enterprise. 

Table 1. Average time taken to re-route on Node failure. 


Test Case 

No. 

Test Case (packets send 
from - to customer sites) 

Actual Path taken 

No. of 

dropped 

packets 

Time taken 

to re-route 
(seconds) 

New Path taken 

1 

IBM- A to IBM-B 

CE 1 A-PE 1 -P 1 -PE4-CE 1 B 

13 

26 

CE 1 A-PE 1 -P2-PE4-CE 

IB 

2 

IBM- A to IBM-B 

CE 1 A-PE 1 -P 1 -PE4-CE 1 B 

12 

24 

CE 1 A-PE 1 -P2-PE4-CE 

IB 

3 

APL-B to APL-A 

CE2A-PE2-P2-PE3-CE2B 

9 

18 

CE2 A-PE2-P 1 -PE3 -CE 
2B 

4 

APL-B to APL-A 

CE2A-PE2-P2-PE3-CE2B 

11 

22 

CE2 A-PE2-P 1 -PE3 -CE 
2B 

5 

IBM-B to IBM-A 

CE 1 B-PE4-P2-PE 1 -CE 1 A 

10 

20 

CE 1 B -PE4-P 1 -PE 1 -CE 
1A 

6 

APL-A to APL-B 

CE2B-PE2-P2-PE3-CE2A 

10 

20 

CE2B -PE2-P 1 -PE3 -CE 
2A 


Average 

10.83 

21.67 



Time taken to re-route (seconds) 
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Fig. 14 Bar chart for Test Cases. 
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